last executing test programs: 3.017217808s ago: executing program 1 (id=2172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.000149068s ago: executing program 1 (id=2173): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 2.243411503s ago: executing program 3 (id=2183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000200000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 2.146701314s ago: executing program 3 (id=2184): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000540)="95", 0x1}], 0x2, 0x0, 0x0, 0x24040000}, 0x40040) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x40) 2.091698374s ago: executing program 3 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x9c2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x5, 0x9}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0x401}, 0x18) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r12, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2.091220284s ago: executing program 1 (id=2186): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x4a, 0x0) 2.069967424s ago: executing program 1 (id=2187): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0x1, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea0388"], 0xfdef) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffff5}, @map_val={0x18, 0x6, 0x2, 0x0, r8}, @ldst={0x1, 0x3, 0x3, 0xa, 0x3, 0x6, 0xfffffffffffffff1}, @jmp={0x5, 0x0, 0x1, 0x8, 0x4, 0x80, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x29, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x9, 0xf3c}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[{0x5, 0x4, 0x10, 0xc}, {0x4, 0x4, 0x7, 0x5}, {0x5, 0x4, 0x10, 0xa}, {0x4, 0x3, 0xc, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x4, 0x3, 0x4, 0x7}], 0x10, 0x6, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffff5}, @map_val={0x18, 0x6, 0x2, 0x0, r8}, @ldst={0x1, 0x3, 0x3, 0xa, 0x3, 0x6, 0xfffffffffffffff1}, @jmp={0x5, 0x0, 0x1, 0x8, 0x4, 0x80, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000380)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x29, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x9, 0xf3c}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[{0x5, 0x4, 0x10, 0xc}, {0x4, 0x4, 0x7, 0x5}, {0x5, 0x4, 0x10, 0xa}, {0x4, 0x3, 0xc, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x4, 0x3, 0x4, 0x7}], 0x10, 0x6, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', r5, 0x7f28, 0x80, 0x60, 0x5, {{0x45, 0x4, 0x0, 0x30, 0x114, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, {[@generic={0x102, 0xe, "bfb0122ca322a89c7e363fac"}, @rr={0x7, 0xf, 0x7, [@loopback, @loopback, @remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0xa9, [@remote, @rand_addr=0x64010101, @multicast2, @loopback, @empty, @local, @multicast2, @multicast2, @multicast2, @multicast1]}, @lsrr={0x83, 0x13, 0x28, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x4b, 0x1, 0x2, [{@local, 0xd1}, {@rand_addr=0x64010100, 0xfffffd3c}, {@rand_addr=0x64010101, 0x3}, {@private=0xa010101, 0x7}, {@multicast1, 0x5}, {@private=0xa010101, 0x4}, {@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x9}, {@loopback, 0xad91}]}, @timestamp={0x44, 0x10, 0x57, 0x0, 0x2, [0x1, 0xfc, 0x80]}, @generic={0x94, 0xf, "851893733a77dffd44f94e005b"}, @timestamp={0x44, 0x10, 0xc0, 0x0, 0x3, [0x800000, 0x5, 0xfff]}, @timestamp_addr={0x44, 0x24, 0x90, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0xf7a5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0x6}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.444968209s ago: executing program 0 (id=2199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.415236439s ago: executing program 0 (id=2200): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.385323479s ago: executing program 0 (id=2201): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (fail_nth: 2) 1.065931882s ago: executing program 1 (id=2202): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xed]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x7d9a, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x8957) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r5, 0x0, 0x0, 0x0) 1.064068611s ago: executing program 3 (id=2203): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mlockall(0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e25, 0x499, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x210, r9, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xad88}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x50}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x210}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000300)=0x4) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) tkill(r6, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 775.968024ms ago: executing program 0 (id=2204): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 775.277724ms ago: executing program 0 (id=2205): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="3801000010001307000000000000000020010000000000000000000000000000ff01000000000000000000000000000100000000000000000a0000006700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003926ad863e7c38a0000000000000000000000002000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x8957) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r9) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x81]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 724.134674ms ago: executing program 2 (id=2206): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x4008}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='module_request\x00'}, 0x18) socketpair(0x3, 0x1, 0xe6e, &(0x7f0000000200)) 723.223914ms ago: executing program 4 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000000200000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 693.673034ms ago: executing program 2 (id=2208): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x4a, 0x0) 658.927535ms ago: executing program 2 (id=2209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (fail_nth: 1) 548.571045ms ago: executing program 2 (id=2210): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x5d40}) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) (async) syz_clone(0x948000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) msgget$private(0x0, 0x80) 545.790875ms ago: executing program 4 (id=2211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 460.634166ms ago: executing program 2 (id=2212): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000180), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002c40)=@newchain={0x1740, 0x64, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0xfff2, 0xb}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x16f8, 0x2, [@TCA_FLOW_EMATCHES={0x126c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x7, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x3ff, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x23dc, 0x8, 0x101}, {0xffffffffffffffff, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x561f}, {0xbdb5, 0x3, 0x1, 0xf6}}}, @TCF_EM_META={0x78, 0x3, 0x0, 0x0, {{0x3}, [@TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="b518fefd4a62886b", @TCF_META_TYPE_VAR="01e07ac7e1fc", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="559b92", @TCF_META_TYPE_VAR="d1"]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="a89705", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4efe47de5ac82f", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR='\r,', @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="598ffc3410e2", @TCF_META_TYPE_VAR='hm(', @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x8000}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_LIST={0x1178, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1018, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}]}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5162e0039651e7", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="9ec9", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xa, 0x1}, {0x4, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0xa, 0x2}, {0x7, 0x12}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x1}, {0x400, 0x4, 0x4, 0x8}}}, @TCF_EM_META={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="966ebbd1b84562"]}]}}, @TCF_EM_IPT={0xa4, 0x3, 0x0, 0x0, {{0x0, 0x9, 0xa8f}, [@TCA_EM_IPT_MATCH_DATA={0x97, 0x5, "bfd5340946f65d33ad433a8a75b0644b4149b10d3ff95c6eb95857a520d25f6c27b842d57d109a5f84e71fba8349231b5d07992081baf7edb7b1d2de6455dbb07b415bc40a4ed1d4d028f317825ca8d5596a8b9da0471b609c860eaf94d018baca48fac096cc0c81ea36d7cae7a958ad18c675cf6322be3b2c70cd065ed106b1a7666942b7f717c29c9323a1c41f8f3f50a2f9"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x800, 0x7, 0x426}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x2}, {0x840, 0x3, 0x0, "146b47"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x2}, {0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_POLICE={0x458, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ffffffb, 0x0, 0x2bac, 0xe, 0x509, {0xb, 0x2, 0x1, 0x0, 0x3, 0x4}, {0x2, 0x2, 0x7, 0x9, 0xedbc, 0xf}, 0xc0, 0x10001, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0xb, 0x1, 0x3, 0x3, 0x2, 0x2, 0x101, 0x3, 0x8000, 0x8, 0x40, 0x7fffffff, 0xfffff587, 0x87, 0x8, 0x6, 0x10000, 0x0, 0x1, 0xf28, 0x7fffffff, 0xf, 0x8, 0x741, 0xbc, 0x1, 0x5, 0x7, 0x9, 0x62e, 0x1000, 0x7, 0x5, 0x8, 0x5, 0x3c9, 0xbb2, 0x4, 0x3, 0x0, 0x3, 0x90, 0x9, 0x9, 0x6, 0x24000, 0x81, 0x5d, 0x1, 0x5, 0x49, 0x1, 0x7, 0x5, 0x9, 0x4, 0x5, 0x1, 0x0, 0x8, 0x1c, 0x6, 0x80000000, 0xd6bc, 0xa, 0xff, 0x2, 0x5, 0x5, 0x0, 0x5, 0xff, 0x7, 0x8000, 0x2, 0x1, 0x1, 0x1, 0x7, 0x40, 0x9, 0x7e8, 0x4, 0x3, 0x4, 0x90, 0x9, 0x4, 0x1, 0xa7, 0x3, 0xcb4, 0xf63, 0x8, 0x9d, 0x7ff, 0x1, 0x3, 0x1000, 0xf9d, 0x10000, 0x0, 0x6, 0x3ff, 0x7ff, 0x3, 0x5, 0xfffffffc, 0x2, 0x4, 0xba0, 0x80000000, 0x7, 0x1, 0x30000000, 0x7fff, 0x4, 0x1000, 0x1, 0x7, 0x101, 0x6, 0xffff, 0x7, 0x3, 0x23, 0x8, 0x4, 0x5, 0xab39, 0x9, 0xd, 0x9, 0x9, 0x6, 0x1, 0x80000000, 0x0, 0x15, 0x5, 0x4, 0x6, 0x4, 0x6, 0xfffff001, 0x7, 0x4665, 0x8, 0x7, 0x9, 0x1, 0x100, 0x7, 0x6, 0x7, 0x8000, 0xa7e, 0xfff, 0x2, 0xfffffff8, 0x5, 0x4, 0x2, 0x4, 0x1c000, 0x2, 0x0, 0xc, 0x6, 0x1, 0x6, 0x2, 0x5, 0x9, 0x1b, 0x102, 0x1, 0x3, 0xfffffffa, 0x3, 0x9568, 0x7fffffff, 0x4, 0x4, 0x6, 0x3, 0x2, 0x0, 0x3, 0xffff, 0x7, 0x5, 0xf, 0x4, 0xffff8345, 0x3, 0x9, 0x0, 0x81, 0x5, 0x8, 0x1, 0x80000000, 0x1, 0x2, 0x0, 0x1000, 0x3, 0x6, 0xffffffff, 0x7fff, 0x9, 0x14040dae, 0x7, 0xfffffffd, 0x2, 0x6, 0x9, 0x62, 0xd, 0x1d6, 0x4, 0x5, 0x5, 0x8, 0x4, 0x80000000, 0xe, 0x5, 0x0, 0x9, 0x9, 0x10009, 0x0, 0x7, 0x7, 0x0, 0x3, 0x7fffffff, 0x5, 0x9, 0x0, 0x8, 0x8, 0x8, 0xa9d8, 0x4, 0x8, 0x8, 0x8, 0xfffffff9, 0x4, 0x9, 0x8]}, @TCA_POLICE_RESULT={0x8}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x4e6c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xc}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xfff1}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xa3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x1740}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) shutdown(0xffffffffffffffff, 0x1) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001700)="b8b0da9ce17fc488e9efd5ee70a5af502d79625cc12c94a1fff9af0f783e4fe1924754c2ec05ceaad9c44e28c823f4314678d681", 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002b00)="0356bab2", 0x4}], 0x1}}], 0x2, 0x40884) 415.902917ms ago: executing program 0 (id=2213): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x9c2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x5, 0x9}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0x401}, 0x18) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r12, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 415.143116ms ago: executing program 4 (id=2214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000000000000000800"], 0x24}}, 0x0) (fail_nth: 2) 414.236716ms ago: executing program 2 (id=2215): r0 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8aa, 0x4}, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x23, 0x8, 0x1d, 0x100, &(0x7f00000000c0)="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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x24}}, 0x24000000) 147.504189ms ago: executing program 3 (id=2216): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 123.571489ms ago: executing program 3 (id=2217): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 120.244958ms ago: executing program 4 (id=2218): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x6, 0x500, &(0x7f0000000500)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) epoll_create1(0x80000) 119.633868ms ago: executing program 1 (id=2219): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="3801000010001307000000000000000020010000000000000000000000000000ff01000000000000000000000000000100000000000000000a0000006700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003926ad863e7c38a0000000000000000000000002000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x8957) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r9) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x81]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) close_range(r6, 0xffffffffffffffff, 0x0) socket(0x1, 0xa, 0x9) socket$nl_route(0x10, 0x3, 0x0) 47.312499ms ago: executing program 4 (id=2220): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r7, &(0x7f00000006c0)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f00000003c0)=[0x1, 0xfffffff9, 0x10000, 0x1ff, 0xffffffff, 0xffffffff, 0x8, 0x8f91]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r10 = socket(0x10, 0x3, 0x6) r11 = socket(0x10, 0x3, 0x0) r12 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6337736afbab0ed3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r14}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1451a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x70e0}, 0x124061, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r12, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x40], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x400], [0x0, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c095}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 4 (id=2221): socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) fcntl$setown(r2, 0x8, r4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") (fail_nth: 2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@abort}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@i_version}, {@block_validity}, {@quota}]}, 0x1, 0x43a, &(0x7f0000000a40)="$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") r5 = open(0x0, 0x141b42, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1000, 0x0) close_range(0xffffffffffffffff, r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): t/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 97.352457][ T30] audit: type=1326 audit(1742162396.702:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 97.375895][ T30] audit: type=1326 audit(1742162396.712:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 97.399394][ T30] audit: type=1326 audit(1742162396.712:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 97.422804][ T30] audit: type=1326 audit(1742162396.712:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 97.947204][ T6851] loop4: detected capacity change from 0 to 512 [ 97.984100][ T6853] lo speed is unknown, defaulting to 1000 [ 98.061156][ T6851] EXT4-fs (loop4): failed to initialize system zone (-117) [ 98.070467][ T6851] EXT4-fs (loop4): mount failed [ 98.760817][ T6881] block device autoloading is deprecated and will be removed. [ 98.898954][ T6894] loop4: detected capacity change from 0 to 512 [ 98.946107][ T6894] EXT4-fs (loop4): too many log groups per flexible block group [ 98.954099][ T6894] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 98.981574][ T6894] EXT4-fs (loop4): mount failed [ 99.044884][ T6910] loop4: detected capacity change from 0 to 512 [ 99.063883][ T6910] EXT4-fs (loop4): failed to initialize system zone (-117) [ 99.071185][ T6910] EXT4-fs (loop4): mount failed [ 99.567081][ T6931] lo speed is unknown, defaulting to 1000 [ 99.881069][ T6935] block device autoloading is deprecated and will be removed. [ 100.588500][ T6966] block device autoloading is deprecated and will be removed. [ 100.626126][ T6953] Cannot find del_set index 0 as target [ 100.718994][ T6979] loop0: detected capacity change from 0 to 512 [ 100.753737][ T6979] EXT4-fs (loop0): too many log groups per flexible block group [ 100.761560][ T6979] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 100.784515][ T6979] EXT4-fs (loop0): mount failed [ 101.014840][ T6998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.062947][ T7003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.441432][ T7026] block device autoloading is deprecated and will be removed. [ 101.683441][ T7040] selection: kmalloc() failed [ 101.717146][ T7042] loop4: detected capacity change from 0 to 512 [ 101.748354][ T7042] EXT4-fs (loop4): too many log groups per flexible block group [ 101.756301][ T7042] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 101.776725][ T7042] EXT4-fs (loop4): mount failed [ 102.229946][ T30] kauditd_printk_skb: 499 callbacks suppressed [ 102.229978][ T30] audit: type=1326 audit(1742162401.782:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.260380][ T30] audit: type=1326 audit(1742162401.782:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.283817][ T30] audit: type=1326 audit(1742162401.782:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.307347][ T30] audit: type=1326 audit(1742162401.782:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.330770][ T30] audit: type=1326 audit(1742162401.782:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.354190][ T30] audit: type=1326 audit(1742162401.782:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.377664][ T30] audit: type=1326 audit(1742162401.782:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.401406][ T30] audit: type=1326 audit(1742162401.782:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.424834][ T30] audit: type=1326 audit(1742162401.782:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.448377][ T30] audit: type=1326 audit(1742162401.782:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 102.500656][ T7083] loop4: detected capacity change from 0 to 512 [ 102.521568][ T7083] EXT4-fs (loop4): failed to initialize system zone (-117) [ 102.601224][ T7083] EXT4-fs (loop4): mount failed [ 102.727208][ T7097] lo speed is unknown, defaulting to 1000 [ 102.881127][ T7108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.071991][ T7115] block device autoloading is deprecated and will be removed. [ 103.110073][ T7125] lo speed is unknown, defaulting to 1000 [ 103.225748][ T7127] Cannot find del_set index 0 as target [ 103.430768][ T7148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.714489][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 103.798545][ T7182] loop2: detected capacity change from 0 to 1024 [ 103.817264][ T7182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.830708][ T7182] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.865087][ T7182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 103.885175][ T7182] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 103.921653][ T7182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.956024][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.993767][ T7202] FAULT_INJECTION: forcing a failure. [ 103.993767][ T7202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.007079][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.4.1382 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 104.007108][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.007123][ T7202] Call Trace: [ 104.007131][ T7202] [ 104.007139][ T7202] dump_stack_lvl+0xf2/0x150 [ 104.007235][ T7202] dump_stack+0x15/0x1a [ 104.007262][ T7202] should_fail_ex+0x24a/0x260 [ 104.007310][ T7202] should_fail+0xb/0x10 [ 104.007386][ T7202] should_fail_usercopy+0x1a/0x20 [ 104.007423][ T7202] _copy_from_user+0x1c/0xa0 [ 104.007445][ T7202] move_addr_to_kernel+0x82/0x120 [ 104.007523][ T7202] __sys_sendto+0x12e/0x230 [ 104.007562][ T7202] __x64_sys_sendto+0x78/0x90 [ 104.007591][ T7202] x64_sys_call+0x29fa/0x2dc0 [ 104.007694][ T7202] do_syscall_64+0xc9/0x1c0 [ 104.007729][ T7202] ? clear_bhb_loop+0x55/0xb0 [ 104.007835][ T7202] ? clear_bhb_loop+0x55/0xb0 [ 104.007884][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.007980][ T7202] RIP: 0033:0x7fe7a08dd169 [ 104.007999][ T7202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.008020][ T7202] RSP: 002b:00007fe79ef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 104.008042][ T7202] RAX: ffffffffffffffda RBX: 00007fe7a0af5fa0 RCX: 00007fe7a08dd169 [ 104.008066][ T7202] RDX: 0000000000034000 RSI: 0000400000000500 RDI: 0000000000000007 [ 104.008077][ T7202] RBP: 00007fe79ef47090 R08: 0000400000000140 R09: 000000000000001c [ 104.008088][ T7202] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 104.008099][ T7202] R13: 0000000000000000 R14: 00007fe7a0af5fa0 R15: 00007ffc3284a4c8 [ 104.008193][ T7202] [ 106.221045][ T7332] block device autoloading is deprecated and will be removed. [ 106.249297][ T7333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.307860][ T7344] rdma_rxe: rxe_newlink: failed to add bond0 [ 106.315310][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 106.325825][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.334663][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.344578][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 106.365801][ T7344] lo speed is unknown, defaulting to 1000 [ 106.393080][ T7344] FAULT_INJECTION: forcing a failure. [ 106.393080][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.406222][ T7344] CPU: 1 UID: 0 PID: 7344 Comm: syz.1.1436 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 106.406283][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.406298][ T7344] Call Trace: [ 106.406305][ T7344] [ 106.406313][ T7344] dump_stack_lvl+0xf2/0x150 [ 106.406347][ T7344] dump_stack+0x15/0x1a [ 106.406391][ T7344] should_fail_ex+0x24a/0x260 [ 106.406481][ T7344] should_fail+0xb/0x10 [ 106.406515][ T7344] should_fail_usercopy+0x1a/0x20 [ 106.406551][ T7344] _copy_from_user+0x1c/0xa0 [ 106.406570][ T7344] copy_msghdr_from_user+0x54/0x2a0 [ 106.406625][ T7344] ? __fget_files+0x17c/0x1c0 [ 106.406737][ T7344] __sys_sendmsg+0x13e/0x230 [ 106.406783][ T7344] __x64_sys_sendmsg+0x46/0x50 [ 106.406814][ T7344] x64_sys_call+0x2734/0x2dc0 [ 106.406845][ T7344] do_syscall_64+0xc9/0x1c0 [ 106.406929][ T7344] ? clear_bhb_loop+0x55/0xb0 [ 106.406961][ T7344] ? clear_bhb_loop+0x55/0xb0 [ 106.406994][ T7344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.407091][ T7344] RIP: 0033:0x7f90bbe5d169 [ 106.407165][ T7344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.407233][ T7344] RSP: 002b:00007f90ba4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.407255][ T7344] RAX: ffffffffffffffda RBX: 00007f90bc075fa0 RCX: 00007f90bbe5d169 [ 106.407270][ T7344] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 000000000000000f [ 106.407337][ T7344] RBP: 00007f90ba4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.407378][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.407391][ T7344] R13: 0000000000000000 R14: 00007f90bc075fa0 R15: 00007fff89e82558 [ 106.407413][ T7344] [ 106.614813][ T7354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.273887][ T7385] rdma_rxe: rxe_newlink: failed to add bond0 [ 107.295262][ T30] kauditd_printk_skb: 608 callbacks suppressed [ 107.295278][ T30] audit: type=1326 audit(1742162406.842:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.327658][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 107.334383][ T30] audit: type=1326 audit(1742162406.882:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.337614][ T7383] Cannot find del_set index 0 as target [ 107.366606][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.375023][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.393372][ T30] audit: type=1326 audit(1742162406.942:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.394889][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 107.416843][ T30] audit: type=1326 audit(1742162406.942:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.438000][ T7385] lo speed is unknown, defaulting to 1000 [ 107.449091][ T30] audit: type=1326 audit(1742162406.942:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.485651][ T30] audit: type=1326 audit(1742162407.032:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.552418][ T30] audit: type=1326 audit(1742162407.102:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.575880][ T30] audit: type=1326 audit(1742162407.102:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.611610][ T30] audit: type=1326 audit(1742162407.102:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.635245][ T30] audit: type=1326 audit(1742162407.102:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.1.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 107.907758][ T7411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.189497][ T7436] loop4: detected capacity change from 0 to 512 [ 108.230484][ T7436] EXT4-fs (loop4): too many log groups per flexible block group [ 108.238262][ T7436] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 108.257644][ T7436] EXT4-fs (loop4): mount failed [ 108.359399][ T7447] loop4: detected capacity change from 0 to 1024 [ 108.387224][ T7447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.399626][ T7447] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.403302][ T7456] block device autoloading is deprecated and will be removed. [ 108.418518][ T7447] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 108.508544][ T7452] Cannot find del_set index 0 as target [ 108.543449][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.596532][ T7467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.667268][ T7477] loop4: detected capacity change from 0 to 512 [ 108.688386][ T7477] EXT4-fs (loop4): too many log groups per flexible block group [ 108.696268][ T7477] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 108.704445][ T7477] EXT4-fs (loop4): mount failed [ 108.727331][ T7481] block device autoloading is deprecated and will be removed. [ 108.780321][ T7485] loop0: detected capacity change from 0 to 1024 [ 108.812724][ T7485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.824910][ T7485] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.842977][ T7485] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 108.907854][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.983352][ T7500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.036292][ T7512] loop0: detected capacity change from 0 to 512 [ 109.057806][ T7512] EXT4-fs (loop0): too many log groups per flexible block group [ 109.065555][ T7512] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 109.072662][ T7512] EXT4-fs (loop0): mount failed [ 109.117577][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.128803][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.151475][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.171680][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.207324][ T7523] loop0: detected capacity change from 0 to 1024 [ 109.242235][ T7525] loop2: detected capacity change from 0 to 512 [ 109.249948][ T7525] EXT4-fs (loop2): failed to initialize system zone (-117) [ 109.258413][ T7525] EXT4-fs (loop2): mount failed [ 109.298033][ T7530] loop2: detected capacity change from 0 to 1024 [ 109.328010][ T7530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.340334][ T7530] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.353408][ T7530] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 109.378774][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.445348][ T7543] loop2: detected capacity change from 0 to 1024 [ 109.466840][ T7543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.479211][ T7543] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.491807][ T7543] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 109.508194][ T7543] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 109.522201][ T7543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.526498][ T7552] 9pnet_fd: Insufficient options for proto=fd [ 109.552486][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.715173][ T7558] Cannot find del_set index 0 as target [ 109.918230][ T7580] 9pnet_fd: Insufficient options for proto=fd [ 109.971116][ T7583] loop2: detected capacity change from 0 to 1024 [ 109.996855][ T7583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.024657][ T7583] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.045755][ T7583] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 110.111331][ T7583] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 110.141014][ T7583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.194066][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.209381][ T7602] loop0: detected capacity change from 0 to 1024 [ 110.239917][ T7602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.265526][ T7602] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.375316][ T7602] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 110.441456][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.529871][ T7618] 9pnet_fd: Insufficient options for proto=fd [ 110.549029][ T7621] loop2: detected capacity change from 0 to 512 [ 110.591417][ T7621] EXT4-fs (loop2): too many log groups per flexible block group [ 110.599153][ T7621] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 110.620559][ T7621] EXT4-fs (loop2): mount failed [ 110.747982][ T7639] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 110.759240][ T7635] loop2: detected capacity change from 0 to 1024 [ 110.770377][ T7639] FAULT_INJECTION: forcing a failure. [ 110.770377][ T7639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.783517][ T7639] CPU: 0 UID: 0 PID: 7639 Comm: syz.1.1541 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 110.783547][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.783562][ T7639] Call Trace: [ 110.783570][ T7639] [ 110.783579][ T7639] dump_stack_lvl+0xf2/0x150 [ 110.783613][ T7639] dump_stack+0x15/0x1a [ 110.783639][ T7639] should_fail_ex+0x24a/0x260 [ 110.783723][ T7639] should_fail+0xb/0x10 [ 110.783755][ T7639] should_fail_usercopy+0x1a/0x20 [ 110.783792][ T7639] strncpy_from_user+0x25/0x210 [ 110.783820][ T7639] ? kstrtouint_from_user+0xb0/0xe0 [ 110.783910][ T7639] path_setxattrat+0xed/0x310 [ 110.783950][ T7639] __x64_sys_fsetxattr+0x6d/0x80 [ 110.783986][ T7639] x64_sys_call+0x29d2/0x2dc0 [ 110.784022][ T7639] do_syscall_64+0xc9/0x1c0 [ 110.784086][ T7639] ? clear_bhb_loop+0x55/0xb0 [ 110.784119][ T7639] ? clear_bhb_loop+0x55/0xb0 [ 110.784151][ T7639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.784286][ T7639] RIP: 0033:0x7f90bbe5d169 [ 110.784379][ T7639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.784396][ T7639] RSP: 002b:00007f90ba4c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 110.784415][ T7639] RAX: ffffffffffffffda RBX: 00007f90bc075fa0 RCX: 00007f90bbe5d169 [ 110.784429][ T7639] RDX: 00004000000002c0 RSI: 0000400000000280 RDI: 0000000000000006 [ 110.784443][ T7639] RBP: 00007f90ba4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.784457][ T7639] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 110.784471][ T7639] R13: 0000000000000000 R14: 00007f90bc075fa0 R15: 00007fff89e82558 [ 110.784542][ T7639] [ 110.981003][ T7635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.999882][ T7635] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.022221][ T7650] 9pnet_fd: Insufficient options for proto=fd [ 111.068057][ T7656] loop0: detected capacity change from 0 to 512 [ 111.088234][ T7635] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 111.096520][ T7656] EXT4-fs (loop0): too many log groups per flexible block group [ 111.110719][ T7656] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 111.145562][ T7656] EXT4-fs (loop0): mount failed [ 111.146136][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.502272][ T7686] 9pnet_fd: Insufficient options for proto=fd [ 111.554318][ T7692] loop2: detected capacity change from 0 to 512 [ 111.612261][ T7692] EXT4-fs (loop2): failed to initialize system zone (-117) [ 111.620896][ T7692] EXT4-fs (loop2): mount failed [ 111.651807][ T7702] loop2: detected capacity change from 0 to 512 [ 111.671498][ T7702] EXT4-fs (loop2): too many log groups per flexible block group [ 111.679414][ T7702] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 111.695245][ T7708] FAULT_INJECTION: forcing a failure. [ 111.695245][ T7708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.708525][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.0.1566 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 111.708624][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.708638][ T7708] Call Trace: [ 111.708645][ T7708] [ 111.708653][ T7708] dump_stack_lvl+0xf2/0x150 [ 111.708683][ T7708] dump_stack+0x15/0x1a [ 111.708705][ T7708] should_fail_ex+0x24a/0x260 [ 111.708805][ T7708] should_fail+0xb/0x10 [ 111.708838][ T7708] should_fail_usercopy+0x1a/0x20 [ 111.708870][ T7708] _copy_from_user+0x1c/0xa0 [ 111.708888][ T7708] copy_msghdr_from_user+0x54/0x2a0 [ 111.708995][ T7708] ? __fget_files+0x17c/0x1c0 [ 111.709041][ T7708] __sys_sendmmsg+0x1e8/0x4b0 [ 111.709146][ T7708] __x64_sys_sendmmsg+0x57/0x70 [ 111.709173][ T7708] x64_sys_call+0x29aa/0x2dc0 [ 111.709236][ T7708] do_syscall_64+0xc9/0x1c0 [ 111.709348][ T7708] ? clear_bhb_loop+0x55/0xb0 [ 111.709381][ T7708] ? clear_bhb_loop+0x55/0xb0 [ 111.709461][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.709498][ T7708] RIP: 0033:0x7f379747d169 [ 111.709513][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.709537][ T7708] RSP: 002b:00007f3795ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.709555][ T7708] RAX: ffffffffffffffda RBX: 00007f3797695fa0 RCX: 00007f379747d169 [ 111.709568][ T7708] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000003 [ 111.709582][ T7708] RBP: 00007f3795ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.709596][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.709608][ T7708] R13: 0000000000000000 R14: 00007f3797695fa0 R15: 00007ffd0728fa68 [ 111.709638][ T7708] [ 111.714261][ T7702] EXT4-fs (loop2): mount failed [ 112.047337][ T7726] 9pnet_fd: Insufficient options for proto=fd [ 112.189391][ T7733] loop0: detected capacity change from 0 to 512 [ 112.218264][ T7733] EXT4-fs (loop0): failed to initialize system zone (-117) [ 112.226907][ T7735] loop2: detected capacity change from 0 to 1024 [ 112.234426][ T7733] EXT4-fs (loop0): mount failed [ 112.242742][ T7735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.257126][ T7735] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.299268][ T7744] loop4: detected capacity change from 0 to 512 [ 112.305630][ T30] kauditd_printk_skb: 1215 callbacks suppressed [ 112.305645][ T30] audit: type=1326 audit(1742162411.852:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 112.336265][ T30] audit: type=1326 audit(1742162411.862:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 112.359903][ T30] audit: type=1326 audit(1742162411.862:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 112.383459][ T30] audit: type=1326 audit(1742162411.862:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 112.383793][ T7735] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 112.406953][ T30] audit: type=1326 audit(1742162411.862:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f379747d1a3 code=0x7ffc0000 [ 112.406991][ T30] audit: type=1326 audit(1742162411.862:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f379747bc1f code=0x7ffc0000 [ 112.415208][ T7735] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 112.470502][ T30] audit: type=1326 audit(1742162411.862:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.0.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f379747d1f7 code=0x7ffc0000 [ 112.494299][ T7741] loop0: detected capacity change from 0 to 1024 [ 112.503914][ T30] audit: type=1326 audit(1742162411.892:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7734 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b9b1cbad0 code=0x7ffc0000 [ 112.527392][ T30] audit: type=1326 audit(1742162411.892:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7734 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7b9b1cbeb7 code=0x7ffc0000 [ 112.550783][ T30] audit: type=1326 audit(1742162411.892:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7734 comm="syz.2.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b9b1cbad0 code=0x7ffc0000 [ 112.590776][ T7744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.603876][ T7744] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.616241][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.646329][ T7741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.658517][ T7741] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.674087][ T7741] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 112.695864][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.704461][ T7741] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 112.729063][ T7741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.758194][ T7755] Cannot find del_set index 0 as target [ 112.787469][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.185716][ T7788] loop2: detected capacity change from 0 to 1024 [ 113.247475][ T7788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.259666][ T7800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.275670][ T7788] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.291720][ T7803] 9pnet_fd: Insufficient options for proto=fd [ 113.301574][ T7803] block device autoloading is deprecated and will be removed. [ 113.314413][ T7788] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 113.331567][ T7795] SELinux: failed to load policy [ 113.382001][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.510152][ T7827] FAULT_INJECTION: forcing a failure. [ 113.510152][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.523289][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.3.1608 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 113.523457][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.523472][ T7827] Call Trace: [ 113.523480][ T7827] [ 113.523489][ T7827] dump_stack_lvl+0xf2/0x150 [ 113.523522][ T7827] dump_stack+0x15/0x1a [ 113.523581][ T7827] should_fail_ex+0x24a/0x260 [ 113.523613][ T7827] should_fail+0xb/0x10 [ 113.523688][ T7827] should_fail_usercopy+0x1a/0x20 [ 113.523854][ T7827] _copy_from_user+0x1c/0xa0 [ 113.523873][ T7827] move_addr_to_kernel+0x82/0x120 [ 113.523979][ T7827] __sys_sendto+0x12e/0x230 [ 113.524009][ T7827] __x64_sys_sendto+0x78/0x90 [ 113.524071][ T7827] x64_sys_call+0x29fa/0x2dc0 [ 113.524098][ T7827] do_syscall_64+0xc9/0x1c0 [ 113.524129][ T7827] ? clear_bhb_loop+0x55/0xb0 [ 113.524176][ T7827] ? clear_bhb_loop+0x55/0xb0 [ 113.524237][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.524264][ T7827] RIP: 0033:0x7f778f4ad169 [ 113.524328][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.524346][ T7827] RSP: 002b:00007f778db17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 113.524364][ T7827] RAX: ffffffffffffffda RBX: 00007f778f6c5fa0 RCX: 00007f778f4ad169 [ 113.524376][ T7827] RDX: 0000000000034000 RSI: 0000400000000500 RDI: 0000000000000006 [ 113.524388][ T7827] RBP: 00007f778db17090 R08: 0000400000000140 R09: 000000000000001c [ 113.524399][ T7827] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 113.524489][ T7827] R13: 0000000000000000 R14: 00007f778f6c5fa0 R15: 00007ffe9964f5a8 [ 113.524507][ T7827] [ 113.706987][ T7817] Cannot find del_set index 0 as target [ 113.884306][ T7834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.970753][ T7843] 9pnet_fd: Insufficient options for proto=fd [ 114.049253][ T7846] loop2: detected capacity change from 0 to 1024 [ 114.067164][ T7846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.094559][ T7846] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.108905][ T7846] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 114.143200][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.211903][ T7859] 9pnet_fd: Insufficient options for proto=fd [ 114.290694][ T7863] SELinux: failed to load policy [ 114.324168][ T7874] loop4: detected capacity change from 0 to 512 [ 114.346696][ T7874] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1623'. [ 114.431839][ T7888] FAULT_INJECTION: forcing a failure. [ 114.431839][ T7888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.445109][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.4.1630 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 114.445139][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.445153][ T7888] Call Trace: [ 114.445160][ T7888] [ 114.445168][ T7888] dump_stack_lvl+0xf2/0x150 [ 114.445246][ T7888] dump_stack+0x15/0x1a [ 114.445272][ T7888] should_fail_ex+0x24a/0x260 [ 114.445308][ T7888] should_fail+0xb/0x10 [ 114.445337][ T7888] should_fail_usercopy+0x1a/0x20 [ 114.445380][ T7888] _copy_from_user+0x1c/0xa0 [ 114.445404][ T7888] copy_msghdr_from_user+0x54/0x2a0 [ 114.445479][ T7888] ? __fget_files+0x17c/0x1c0 [ 114.445517][ T7888] __sys_sendmsg+0x13e/0x230 [ 114.445559][ T7888] __x64_sys_sendmsg+0x46/0x50 [ 114.445587][ T7888] x64_sys_call+0x2734/0x2dc0 [ 114.445634][ T7888] do_syscall_64+0xc9/0x1c0 [ 114.445751][ T7888] ? clear_bhb_loop+0x55/0xb0 [ 114.445782][ T7888] ? clear_bhb_loop+0x55/0xb0 [ 114.445867][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.445956][ T7888] RIP: 0033:0x7fe7a08dd169 [ 114.445973][ T7888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.445998][ T7888] RSP: 002b:00007fe79ef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.446016][ T7888] RAX: ffffffffffffffda RBX: 00007fe7a0af5fa0 RCX: 00007fe7a08dd169 [ 114.446028][ T7888] RDX: 0000000000000000 RSI: 00004000000004c0 RDI: 0000000000000005 [ 114.446042][ T7888] RBP: 00007fe79ef47090 R08: 0000000000000000 R09: 0000000000000000 [ 114.446056][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.446070][ T7888] R13: 0000000000000000 R14: 00007fe7a0af5fa0 R15: 00007ffc3284a4c8 [ 114.446095][ T7888] [ 114.657022][ T7892] loop2: detected capacity change from 0 to 1024 [ 114.712725][ T7892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.727663][ T7892] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.751401][ T7886] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 114.812468][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.858384][ T7908] loop2: detected capacity change from 0 to 1024 [ 114.891649][ T7914] loop4: detected capacity change from 0 to 1024 [ 114.903020][ T7908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.932022][ T7914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.955891][ T7906] Cannot find del_set index 0 as target [ 115.003218][ T7908] EXT4-fs (loop2): shut down requested (0) [ 115.052902][ T7914] EXT4-fs (loop4): shut down requested (0) [ 115.061062][ T7914] FAULT_INJECTION: forcing a failure. [ 115.061062][ T7914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.074162][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.4.1637 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 115.074200][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.074225][ T7914] Call Trace: [ 115.074233][ T7914] [ 115.074242][ T7914] dump_stack_lvl+0xf2/0x150 [ 115.074272][ T7914] dump_stack+0x15/0x1a [ 115.074293][ T7914] should_fail_ex+0x24a/0x260 [ 115.074328][ T7914] should_fail+0xb/0x10 [ 115.074399][ T7914] should_fail_usercopy+0x1a/0x20 [ 115.074438][ T7914] _copy_from_user+0x1c/0xa0 [ 115.074518][ T7914] __sys_bpf+0x14e/0x7a0 [ 115.074560][ T7914] __x64_sys_bpf+0x43/0x50 [ 115.074585][ T7914] x64_sys_call+0x2914/0x2dc0 [ 115.074614][ T7914] do_syscall_64+0xc9/0x1c0 [ 115.074731][ T7914] ? clear_bhb_loop+0x55/0xb0 [ 115.074765][ T7914] ? clear_bhb_loop+0x55/0xb0 [ 115.074817][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.074848][ T7914] RIP: 0033:0x7fe7a08dd169 [ 115.074879][ T7914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.074899][ T7914] RSP: 002b:00007fe79ef47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.074921][ T7914] RAX: ffffffffffffffda RBX: 00007fe7a0af5fa0 RCX: 00007fe7a08dd169 [ 115.074936][ T7914] RDX: 0000000000000078 RSI: 0000400000000440 RDI: 0000000000000005 [ 115.074951][ T7914] RBP: 00007fe79ef47090 R08: 0000000000000000 R09: 0000000000000000 [ 115.074966][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.074980][ T7914] R13: 0000000000000000 R14: 00007fe7a0af5fa0 R15: 00007ffc3284a4c8 [ 115.074996][ T7914] [ 115.249184][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.260325][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.450225][ T7933] loop4: detected capacity change from 0 to 512 [ 115.502947][ T7933] EXT4-fs (loop4): too many log groups per flexible block group [ 115.510714][ T7933] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 115.538944][ T7933] EXT4-fs (loop4): mount failed [ 115.901487][ T7965] ip6tnl1: entered promiscuous mode [ 115.906858][ T7965] ip6tnl1: entered allmulticast mode [ 116.107914][ T7984] loop2: detected capacity change from 0 to 512 [ 116.138555][ T7984] EXT4-fs (loop2): too many log groups per flexible block group [ 116.146474][ T7984] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 116.345583][ T7984] EXT4-fs (loop2): mount failed [ 116.422387][ T7987] Cannot find del_set index 0 as target [ 116.599558][ T8002] block device autoloading is deprecated and will be removed. [ 116.883116][ T8019] 9pnet_fd: Insufficient options for proto=fd [ 116.912974][ T8019] block device autoloading is deprecated and will be removed. [ 117.144602][ T8039] loop4: detected capacity change from 0 to 512 [ 117.190889][ T8039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.225722][ T8039] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.238879][ T3378] IPVS: starting estimator thread 0... [ 117.345797][ T30] kauditd_printk_skb: 724 callbacks suppressed [ 117.345815][ T30] audit: type=1326 audit(1742162416.902:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.377800][ T30] audit: type=1326 audit(1742162416.902:9871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.401296][ T30] audit: type=1326 audit(1742162416.902:9872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.424784][ T30] audit: type=1326 audit(1742162416.902:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.448214][ T30] audit: type=1326 audit(1742162416.902:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.457740][ T8049] IPVS: using max 2304 ests per chain, 115200 per kthread [ 117.471694][ T30] audit: type=1326 audit(1742162416.902:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.471729][ T30] audit: type=1326 audit(1742162416.902:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.525738][ T30] audit: type=1326 audit(1742162416.902:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.549289][ T30] audit: type=1326 audit(1742162416.902:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.572780][ T30] audit: type=1326 audit(1742162416.902:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe7a08dd169 code=0x7ffc0000 [ 117.755825][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.944736][ T8083] smc: net device bond0 applied user defined pnetid SYZ0 [ 118.009305][ T8083] smc: net device bond0 erased user defined pnetid SYZ0 [ 118.186005][ T8072] Cannot find del_set index 0 as target [ 118.522407][ T8094] Cannot find del_set index 0 as target [ 118.590420][ T8101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.720745][ T8116] loop4: detected capacity change from 0 to 512 [ 118.746462][ T8116] EXT4-fs (loop4): too many log groups per flexible block group [ 118.754247][ T8116] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 118.781822][ T8116] EXT4-fs (loop4): mount failed [ 118.809506][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'. [ 118.821227][ T8129] netlink: 'syz.3.1707': attribute type 2 has an invalid length. [ 118.829056][ T8129] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1707'. [ 118.897276][ T8138] FAULT_INJECTION: forcing a failure. [ 118.897276][ T8138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.910486][ T8138] CPU: 1 UID: 0 PID: 8138 Comm: syz.4.1710 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 118.910516][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.910530][ T8138] Call Trace: [ 118.910537][ T8138] [ 118.910545][ T8138] dump_stack_lvl+0xf2/0x150 [ 118.910580][ T8138] dump_stack+0x15/0x1a [ 118.910663][ T8138] should_fail_ex+0x24a/0x260 [ 118.910701][ T8138] should_fail+0xb/0x10 [ 118.910735][ T8138] should_fail_usercopy+0x1a/0x20 [ 118.910820][ T8138] _copy_from_user+0x1c/0xa0 [ 118.910845][ T8138] copy_msghdr_from_user+0x54/0x2a0 [ 118.910883][ T8138] ? __fget_files+0x17c/0x1c0 [ 118.910922][ T8138] __sys_sendmsg+0x13e/0x230 [ 118.910965][ T8138] __x64_sys_sendmsg+0x46/0x50 [ 118.910993][ T8138] x64_sys_call+0x2734/0x2dc0 [ 118.911087][ T8138] do_syscall_64+0xc9/0x1c0 [ 118.911135][ T8138] ? clear_bhb_loop+0x55/0xb0 [ 118.911164][ T8138] ? clear_bhb_loop+0x55/0xb0 [ 118.911198][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.911279][ T8138] RIP: 0033:0x7fe7a08dd169 [ 118.911293][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.911311][ T8138] RSP: 002b:00007fe79ef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.911330][ T8138] RAX: ffffffffffffffda RBX: 00007fe7a0af5fa0 RCX: 00007fe7a08dd169 [ 118.911342][ T8138] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000006 [ 118.911353][ T8138] RBP: 00007fe79ef47090 R08: 0000000000000000 R09: 0000000000000000 [ 118.911445][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.911461][ T8138] R13: 0000000000000000 R14: 00007fe7a0af5fa0 R15: 00007ffc3284a4c8 [ 118.911483][ T8138] [ 119.171088][ T8147] 9pnet_fd: Insufficient options for proto=fd [ 119.289511][ T8156] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 119.508586][ T8167] FAULT_INJECTION: forcing a failure. [ 119.508586][ T8167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.521769][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.2.1720 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 119.521799][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.521815][ T8167] Call Trace: [ 119.521823][ T8167] [ 119.521831][ T8167] dump_stack_lvl+0xf2/0x150 [ 119.521867][ T8167] dump_stack+0x15/0x1a [ 119.521893][ T8167] should_fail_ex+0x24a/0x260 [ 119.522002][ T8167] should_fail+0xb/0x10 [ 119.522036][ T8167] should_fail_usercopy+0x1a/0x20 [ 119.522098][ T8167] _copy_from_user+0x1c/0xa0 [ 119.522173][ T8167] copy_msghdr_from_user+0x54/0x2a0 [ 119.522260][ T8167] ? __fget_files+0x17c/0x1c0 [ 119.522330][ T8167] __sys_sendmsg+0x13e/0x230 [ 119.522463][ T8167] __x64_sys_sendmsg+0x46/0x50 [ 119.522516][ T8167] x64_sys_call+0x2734/0x2dc0 [ 119.522581][ T8167] do_syscall_64+0xc9/0x1c0 [ 119.522692][ T8167] ? clear_bhb_loop+0x55/0xb0 [ 119.522802][ T8167] ? clear_bhb_loop+0x55/0xb0 [ 119.522836][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.522869][ T8167] RIP: 0033:0x7f7b9b1cd169 [ 119.522887][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.522977][ T8167] RSP: 002b:00007f7b99831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.522999][ T8167] RAX: ffffffffffffffda RBX: 00007f7b9b3e5fa0 RCX: 00007f7b9b1cd169 [ 119.523012][ T8167] RDX: 0000000000000000 RSI: 00004000000004c0 RDI: 0000000000000006 [ 119.523027][ T8167] RBP: 00007f7b99831090 R08: 0000000000000000 R09: 0000000000000000 [ 119.523039][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.523052][ T8167] R13: 0000000000000000 R14: 00007f7b9b3e5fa0 R15: 00007ffd63dce758 [ 119.523145][ T8167] [ 120.275459][ T8185] block device autoloading is deprecated and will be removed. [ 120.422174][ T8193] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 120.623091][ T8209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.657164][ T8219] block device autoloading is deprecated and will be removed. [ 121.097410][ T8239] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 121.163958][ T8244] FAULT_INJECTION: forcing a failure. [ 121.163958][ T8244] name failslab, interval 1, probability 0, space 0, times 0 [ 121.176649][ T8244] CPU: 0 UID: 0 PID: 8244 Comm: syz.3.1749 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 121.176680][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.176695][ T8244] Call Trace: [ 121.176703][ T8244] [ 121.176718][ T8244] dump_stack_lvl+0xf2/0x150 [ 121.176746][ T8244] dump_stack+0x15/0x1a [ 121.176767][ T8244] should_fail_ex+0x24a/0x260 [ 121.176802][ T8244] should_failslab+0x8f/0xb0 [ 121.176911][ T8244] kmem_cache_alloc_noprof+0x52/0x320 [ 121.176971][ T8244] ? getname_flags+0x81/0x3b0 [ 121.177034][ T8244] getname_flags+0x81/0x3b0 [ 121.177072][ T8244] getname+0x17/0x20 [ 121.177091][ T8244] do_sys_openat2+0x67/0x120 [ 121.177115][ T8244] __x64_sys_openat+0xf3/0x120 [ 121.177198][ T8244] x64_sys_call+0x2b30/0x2dc0 [ 121.177225][ T8244] do_syscall_64+0xc9/0x1c0 [ 121.177298][ T8244] ? clear_bhb_loop+0x55/0xb0 [ 121.177330][ T8244] ? clear_bhb_loop+0x55/0xb0 [ 121.177360][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.177388][ T8244] RIP: 0033:0x7f778f4ad169 [ 121.177403][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.177422][ T8244] RSP: 002b:00007f778db17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.177589][ T8244] RAX: ffffffffffffffda RBX: 00007f778f6c5fa0 RCX: 00007f778f4ad169 [ 121.177605][ T8244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 121.177648][ T8244] RBP: 00007f778db17090 R08: 0000000000000000 R09: 0000000000000000 [ 121.177663][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.177676][ T8244] R13: 0000000000000000 R14: 00007f778f6c5fa0 R15: 00007ffe9964f5a8 [ 121.177697][ T8244] [ 121.397932][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1751'. [ 121.542929][ T8261] block device autoloading is deprecated and will be removed. [ 121.591626][ T8258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.772568][ T8275] process 'syz.3.1759' launched '/dev/fd/4' with NULL argv: empty string added [ 122.077729][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 122.179489][ T8301] FAULT_INJECTION: forcing a failure. [ 122.179489][ T8301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.192651][ T8301] CPU: 1 UID: 0 PID: 8301 Comm: syz.3.1768 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 122.192680][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.192694][ T8301] Call Trace: [ 122.192702][ T8301] [ 122.192756][ T8301] dump_stack_lvl+0xf2/0x150 [ 122.192785][ T8301] dump_stack+0x15/0x1a [ 122.192852][ T8301] should_fail_ex+0x24a/0x260 [ 122.192885][ T8301] should_fail+0xb/0x10 [ 122.192918][ T8301] should_fail_usercopy+0x1a/0x20 [ 122.192980][ T8301] _copy_from_user+0x1c/0xa0 [ 122.193000][ T8301] copy_msghdr_from_user+0x54/0x2a0 [ 122.193037][ T8301] ? __fget_files+0x17c/0x1c0 [ 122.193074][ T8301] __sys_sendmsg+0x13e/0x230 [ 122.193121][ T8301] __x64_sys_sendmsg+0x46/0x50 [ 122.193160][ T8301] x64_sys_call+0x2734/0x2dc0 [ 122.193190][ T8301] do_syscall_64+0xc9/0x1c0 [ 122.193261][ T8301] ? clear_bhb_loop+0x55/0xb0 [ 122.193292][ T8301] ? clear_bhb_loop+0x55/0xb0 [ 122.193323][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.193419][ T8301] RIP: 0033:0x7f778f4ad169 [ 122.193437][ T8301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.193459][ T8301] RSP: 002b:00007f778db17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.193482][ T8301] RAX: ffffffffffffffda RBX: 00007f778f6c5fa0 RCX: 00007f778f4ad169 [ 122.193497][ T8301] RDX: 0000000000000010 RSI: 00004000000000c0 RDI: 0000000000000004 [ 122.193511][ T8301] RBP: 00007f778db17090 R08: 0000000000000000 R09: 0000000000000000 [ 122.193523][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.193569][ T8301] R13: 0000000000000000 R14: 00007f778f6c5fa0 R15: 00007ffe9964f5a8 [ 122.193591][ T8301] [ 122.415613][ T30] kauditd_printk_skb: 646 callbacks suppressed [ 122.415628][ T30] audit: type=1326 audit(1742162421.972:10526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.493342][ T8305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.511804][ T30] audit: type=1326 audit(1742162422.012:10527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.535523][ T30] audit: type=1326 audit(1742162422.012:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.559046][ T30] audit: type=1326 audit(1742162422.012:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.582559][ T30] audit: type=1326 audit(1742162422.012:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.606118][ T30] audit: type=1326 audit(1742162422.012:10531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.629640][ T30] audit: type=1326 audit(1742162422.012:10532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.653208][ T30] audit: type=1326 audit(1742162422.012:10533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.676727][ T30] audit: type=1326 audit(1742162422.012:10534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.700432][ T30] audit: type=1326 audit(1742162422.012:10535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 122.761682][ T8324] loop4: detected capacity change from 0 to 512 [ 122.786760][ T8324] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1776: bg 0: block 35: padding at end of block bitmap is not set [ 122.824763][ T8324] EXT4-fs (loop4): Remounting filesystem read-only [ 122.844131][ T8324] EXT4-fs (loop4): 1 truncate cleaned up [ 122.849905][ T8332] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 122.867837][ T8324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.885485][ T8324] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 122.892406][ T8324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.926432][ T8324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8324 comm=syz.4.1776 [ 122.938936][ T8324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8324 comm=syz.4.1776 [ 122.954661][ T8324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.963476][ T8324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.972262][ T8324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.981138][ T8324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.990149][ T8324] geneve2: entered promiscuous mode [ 122.995453][ T8324] geneve2: entered allmulticast mode [ 123.006271][ T8324] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.015197][ T8324] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.024126][ T8324] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.033042][ T8324] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.257429][ T8357] loop4: detected capacity change from 0 to 1024 [ 123.293511][ T8359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.301028][ T8357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.316821][ T8357] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.329836][ T8357] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 123.358313][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.627251][ T8377] block device autoloading is deprecated and will be removed. [ 124.053358][ T8382] Cannot find del_set index 0 as target [ 124.148614][ T8399] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 124.225242][ T8403] loop4: detected capacity change from 0 to 1024 [ 124.276852][ T8403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.301399][ T8403] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.333887][ T8403] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 124.419214][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.747399][ T8433] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 124.785112][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1814'. [ 124.900433][ T8439] Cannot find del_set index 0 as target [ 124.940111][ T8465] ip6tnl1: entered promiscuous mode [ 124.945607][ T8465] ip6tnl1: entered allmulticast mode [ 124.950927][ T8448] Cannot find del_set index 0 as target [ 125.142710][ T8475] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 125.220591][ T8478] block device autoloading is deprecated and will be removed. [ 125.533919][ T8496] 9pnet: Could not find request transport: fd0x0000000000000003 [ 125.744106][ T8506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.810573][ T8513] loop4: detected capacity change from 0 to 1024 [ 125.864953][ T8513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.901174][ T8520] loop0: detected capacity change from 0 to 1024 [ 125.928644][ T8513] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.946050][ T8520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.977039][ T8520] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.988017][ T8513] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 126.007008][ T8520] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 126.023287][ T8513] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 126.054208][ T8513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.080350][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.177377][ T8533] 9pnet: Could not find request transport: fd0x0000000000000003 [ 126.180221][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.273971][ T8547] loop2: detected capacity change from 0 to 512 [ 126.296178][ T8537] Cannot find del_set index 0 as target [ 126.312891][ T8547] EXT4-fs (loop2): too many log groups per flexible block group [ 126.320674][ T8547] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 126.374307][ T8547] EXT4-fs (loop2): mount failed [ 126.484767][ T8565] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 126.501951][ T8561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.550206][ T8572] 9pnet_fd: Insufficient options for proto=fd [ 126.971602][ T8605] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 127.106738][ T8613] 9pnet_fd: Insufficient options for proto=fd [ 127.147424][ T8610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.306412][ T8624] loop0: detected capacity change from 0 to 1024 [ 127.341579][ T8624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.359432][ T8624] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.372511][ T8624] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 127.414119][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.536958][ T30] kauditd_printk_skb: 1078 callbacks suppressed [ 127.536975][ T30] audit: type=1326 audit(1742162427.092:11614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.569804][ T30] audit: type=1326 audit(1742162427.122:11615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.593414][ T30] audit: type=1326 audit(1742162427.122:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.616998][ T30] audit: type=1326 audit(1742162427.122:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.623081][ T8646] Cannot find del_set index 0 as target [ 127.681997][ T8650] 9pnet_fd: Insufficient options for proto=fd [ 127.726371][ T30] audit: type=1326 audit(1742162427.202:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.749999][ T30] audit: type=1326 audit(1742162427.202:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.773553][ T30] audit: type=1326 audit(1742162427.202:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.0.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.873407][ T30] audit: type=1326 audit(1742162427.422:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.897228][ T30] audit: type=1326 audit(1742162427.422:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.923960][ T30] audit: type=1326 audit(1742162427.422:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 127.963134][ T8657] loop2: detected capacity change from 0 to 1024 [ 127.977221][ T8655] loop0: detected capacity change from 0 to 1024 [ 127.978137][ T8657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.003188][ T8657] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.020056][ T8655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.020129][ T8657] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 128.022292][ T8657] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 128.044207][ T8655] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.060134][ T8657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.101681][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.110749][ T8666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.139926][ T8655] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 128.189737][ T8655] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 128.204633][ T8655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.216530][ T8677] loop4: detected capacity change from 0 to 1024 [ 128.240494][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.251872][ T8677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.267546][ T8677] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.286917][ T8677] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 128.332650][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.376276][ T8687] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 128.558936][ T8707] loop4: detected capacity change from 0 to 1024 [ 128.590284][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.602548][ T8707] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.615769][ T8707] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 128.671998][ T8707] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 128.809764][ T8707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.858022][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.920391][ T8718] loop4: detected capacity change from 0 to 512 [ 128.952186][ T8718] EXT4-fs (loop4): failed to initialize system zone (-117) [ 128.977442][ T8718] EXT4-fs (loop4): mount failed [ 129.083470][ T8724] loop4: detected capacity change from 0 to 1024 [ 129.127020][ T8724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.139627][ T8724] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.152673][ T8724] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 129.224565][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.325216][ T8732] Cannot find del_set index 0 as target [ 129.412137][ T8745] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 129.780099][ T8757] Cannot find del_set index 0 as target [ 130.063926][ T8781] loop2: detected capacity change from 0 to 1024 [ 130.088969][ T8781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.105511][ T8781] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.120621][ T8781] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 130.167205][ T8781] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 130.197232][ T8781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.222996][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.252594][ T8792] loop2: detected capacity change from 0 to 2048 [ 130.262703][ T8792] EXT4-fs: Ignoring removed bh option [ 130.290467][ T8792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.608520][ T8817] block device autoloading is deprecated and will be removed. [ 130.665769][ T8813] Cannot find del_set index 0 as target [ 130.689452][ T8805] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.730085][ T8805] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 130.742632][ T8805] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.742632][ T8805] [ 130.752413][ T8805] EXT4-fs (loop2): Total free blocks count 0 [ 130.758459][ T8805] EXT4-fs (loop2): Free/Dirty block details [ 130.764366][ T8805] EXT4-fs (loop2): free_blocks=2415919104 [ 130.770193][ T8805] EXT4-fs (loop2): dirty_blocks=8224 [ 130.775546][ T8805] EXT4-fs (loop2): Block reservation details [ 130.781542][ T8805] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 130.831750][ T8805] syz.2.1926 (8805) used greatest stack depth: 9416 bytes left [ 130.888128][ T8828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.926976][ T29] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 130.950804][ T8826] Cannot find del_set index 0 as target [ 131.320004][ T8862] loop2: detected capacity change from 0 to 1024 [ 131.348475][ T8862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.360928][ T8862] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.377690][ T8862] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 131.457278][ T8862] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 131.503407][ T8862] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.551555][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.604216][ T8875] loop2: detected capacity change from 0 to 1024 [ 131.847539][ T8877] Cannot find del_set index 0 as target [ 132.090710][ T8889] loop4: detected capacity change from 0 to 2048 [ 132.118698][ T8889] EXT4-fs: Ignoring removed bh option [ 132.158542][ T8889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.460337][ T8906] 9pnet_fd: Insufficient options for proto=fd [ 132.514032][ T8909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.676571][ T8914] Cannot find del_set index 0 as target [ 132.726156][ T8900] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.742752][ T8900] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 132.755159][ T8900] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.755159][ T8900] [ 132.764923][ T8900] EXT4-fs (loop4): Total free blocks count 0 [ 132.770957][ T8900] EXT4-fs (loop4): Free/Dirty block details [ 132.776991][ T8900] EXT4-fs (loop4): free_blocks=2415919104 [ 132.782800][ T8900] EXT4-fs (loop4): dirty_blocks=8224 [ 132.788169][ T8900] EXT4-fs (loop4): Block reservation details [ 132.794230][ T8900] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 132.832244][ T30] kauditd_printk_skb: 828 callbacks suppressed [ 132.832261][ T30] audit: type=1326 audit(1742162432.382:12452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 132.872543][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 132.893877][ T30] audit: type=1326 audit(1742162432.412:12453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 132.917538][ T30] audit: type=1326 audit(1742162432.412:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 132.941149][ T30] audit: type=1326 audit(1742162432.412:12454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 132.964792][ T30] audit: type=1326 audit(1742162432.412:12456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 132.988310][ T30] audit: type=1326 audit(1742162432.412:12457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 133.011913][ T30] audit: type=1326 audit(1742162432.412:12458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 133.035447][ T30] audit: type=1326 audit(1742162432.412:12459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 133.059089][ T30] audit: type=1326 audit(1742162432.412:12460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 133.082590][ T30] audit: type=1326 audit(1742162432.412:12461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 133.225772][ T8942] loop4: detected capacity change from 0 to 1024 [ 133.412112][ T8948] loop2: detected capacity change from 0 to 1024 [ 133.439772][ T8948] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.441251][ T8955] loop0: detected capacity change from 0 to 512 [ 133.467014][ T8948] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 133.467081][ T8955] EXT4-fs (loop0): too many log groups per flexible block group [ 133.486159][ T8948] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 133.489806][ T8955] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 133.509715][ T8955] EXT4-fs (loop0): mount failed [ 133.531251][ T8948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.798477][ T8969] loop0: detected capacity change from 0 to 1024 [ 133.831423][ T8969] EXT4-fs mount: 2 callbacks suppressed [ 133.831439][ T8969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.851600][ T8969] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.874572][ T8969] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 133.941484][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.022174][ T8992] FAULT_INJECTION: forcing a failure. [ 134.022174][ T8992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.035387][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.3.1990 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 134.035415][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.035428][ T8992] Call Trace: [ 134.035433][ T8992] [ 134.035440][ T8992] dump_stack_lvl+0xf2/0x150 [ 134.035469][ T8992] dump_stack+0x15/0x1a [ 134.035537][ T8992] should_fail_ex+0x24a/0x260 [ 134.035575][ T8992] should_fail+0xb/0x10 [ 134.035605][ T8992] should_fail_usercopy+0x1a/0x20 [ 134.035644][ T8992] _copy_from_user+0x1c/0xa0 [ 134.035714][ T8992] copy_msghdr_from_user+0x54/0x2a0 [ 134.035756][ T8992] ? __fget_files+0x17c/0x1c0 [ 134.035830][ T8992] __sys_sendmmsg+0x1e8/0x4b0 [ 134.035888][ T8992] __x64_sys_sendmmsg+0x57/0x70 [ 134.035963][ T8992] x64_sys_call+0x29aa/0x2dc0 [ 134.035996][ T8992] do_syscall_64+0xc9/0x1c0 [ 134.036035][ T8992] ? clear_bhb_loop+0x55/0xb0 [ 134.036064][ T8992] ? clear_bhb_loop+0x55/0xb0 [ 134.036116][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.036147][ T8992] RIP: 0033:0x7f778f4ad169 [ 134.036162][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.036245][ T8992] RSP: 002b:00007f778db17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.036268][ T8992] RAX: ffffffffffffffda RBX: 00007f778f6c5fa0 RCX: 00007f778f4ad169 [ 134.036283][ T8992] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 000000000000000b [ 134.036295][ T8992] RBP: 00007f778db17090 R08: 0000000000000000 R09: 0000000000000000 [ 134.036307][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.036318][ T8992] R13: 0000000000000000 R14: 00007f778f6c5fa0 R15: 00007ffe9964f5a8 [ 134.036337][ T8992] [ 134.293235][ T8990] Cannot find del_set index 0 as target [ 134.481662][ T9010] loop4: detected capacity change from 0 to 1024 [ 134.498274][ T9010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.544816][ T9010] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.596691][ T9010] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 134.637257][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.790779][ T9026] 9pnet_fd: Insufficient options for proto=fd [ 134.884990][ T9035] 9pnet_fd: Insufficient options for proto=fd [ 134.988916][ T9044] loop4: detected capacity change from 0 to 1024 [ 135.061253][ T9044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.105077][ T9044] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.107239][ T9058] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2012'. [ 135.142984][ T9044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 135.229869][ T9056] unsupported nla_type 52263 [ 135.244393][ T9058] loop2: detected capacity change from 0 to 8192 [ 135.270069][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.301560][ T9058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.400885][ T9066] 9pnet_fd: Insufficient options for proto=fd [ 135.429210][ T9070] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2016'. [ 135.517539][ T9077] loop0: detected capacity change from 0 to 512 [ 135.546818][ T9070] FAULT_INJECTION: forcing a failure. [ 135.546818][ T9070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.559938][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.3.2016 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 135.560009][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.560023][ T9070] Call Trace: [ 135.560030][ T9070] [ 135.560088][ T9070] dump_stack_lvl+0xf2/0x150 [ 135.560125][ T9070] dump_stack+0x15/0x1a [ 135.560149][ T9070] should_fail_ex+0x24a/0x260 [ 135.560186][ T9070] should_fail+0xb/0x10 [ 135.560258][ T9070] should_fail_usercopy+0x1a/0x20 [ 135.560294][ T9070] _copy_from_user+0x1c/0xa0 [ 135.560383][ T9070] do_ipv6_setsockopt+0x1ef/0x2250 [ 135.560442][ T9070] ? _parse_integer+0x27/0x30 [ 135.560473][ T9070] ? kstrtouint+0x77/0xc0 [ 135.560501][ T9070] ? avc_has_perm_noaudit+0x1cc/0x210 [ 135.560526][ T9070] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 135.560592][ T9070] ipv6_setsockopt+0x57/0x130 [ 135.560627][ T9070] tcp_setsockopt+0x93/0xb0 [ 135.560703][ T9070] sock_common_setsockopt+0x64/0x80 [ 135.560741][ T9070] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 135.560779][ T9070] __sys_setsockopt+0x187/0x200 [ 135.560821][ T9070] __x64_sys_setsockopt+0x66/0x80 [ 135.560851][ T9070] x64_sys_call+0x282e/0x2dc0 [ 135.560882][ T9070] do_syscall_64+0xc9/0x1c0 [ 135.560921][ T9070] ? clear_bhb_loop+0x55/0xb0 [ 135.560952][ T9070] ? clear_bhb_loop+0x55/0xb0 [ 135.561042][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.561077][ T9070] RIP: 0033:0x7f778f4ad169 [ 135.561125][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.561146][ T9070] RSP: 002b:00007f778db17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.561167][ T9070] RAX: ffffffffffffffda RBX: 00007f778f6c5fa0 RCX: 00007f778f4ad169 [ 135.561182][ T9070] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 135.561198][ T9070] RBP: 00007f778db17090 R08: 0000000000000660 R09: 0000000000000000 [ 135.561280][ T9070] R10: 0000400000000680 R11: 0000000000000246 R12: 0000000000000001 [ 135.561295][ T9070] R13: 0000000000000000 R14: 00007f778f6c5fa0 R15: 00007ffe9964f5a8 [ 135.561375][ T9070] [ 135.571090][ T9077] EXT4-fs (loop0): too many log groups per flexible block group [ 135.707391][ T9086] loop2: detected capacity change from 0 to 512 [ 135.725054][ T9077] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 135.807916][ T9086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.821688][ T9086] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.849403][ T9086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.860323][ T9077] EXT4-fs (loop0): mount failed [ 135.874858][ T9086] netlink: '': attribute type 1 has an invalid length. [ 135.881990][ T9086] netlink: 16 bytes leftover after parsing attributes in process `'. [ 135.914138][ T9092] x_tables: duplicate underflow at hook 1 [ 135.931845][ T9086] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 135.958782][ T3378] IPVS: starting estimator thread 0... [ 135.964469][ T9086] SELinux: failed to load policy [ 136.026476][ T9106] 9pnet_fd: Insufficient options for proto=fd [ 136.045432][ T9098] IPVS: using max 2064 ests per chain, 103200 per kthread [ 136.089470][ T9113] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 136.118705][ T9121] loop0: detected capacity change from 0 to 512 [ 136.147652][ T9121] EXT4-fs (loop0): too many log groups per flexible block group [ 136.155468][ T9121] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 136.162519][ T9121] EXT4-fs (loop0): mount failed [ 136.219164][ T9125] loop0: detected capacity change from 0 to 1024 [ 136.230905][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 136.250302][ T9132] syz.2.2039 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 136.264085][ T9130] veth1_macvtap: left promiscuous mode [ 136.280263][ T9125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.329856][ T9125] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.346031][ T9138] 9pnet_fd: Insufficient options for proto=fd [ 136.378693][ T9125] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 136.409495][ T9145] 9pnet_fd: Insufficient options for proto=fd [ 136.428623][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.465413][ T9147] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 136.492457][ T9154] loop2: detected capacity change from 0 to 512 [ 136.548834][ T9154] EXT4-fs (loop2): too many log groups per flexible block group [ 136.556679][ T9154] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 136.576986][ T9154] EXT4-fs (loop2): mount failed [ 136.652601][ T9165] bridge0: port 3(vlan2) entered blocking state [ 136.659183][ T9165] bridge0: port 3(vlan2) entered disabled state [ 136.712638][ T9165] vlan2: entered allmulticast mode [ 136.726890][ T9165] vlan2: left allmulticast mode [ 136.739249][ T9176] loop4: detected capacity change from 0 to 1024 [ 136.748951][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 136.780169][ T9176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.781770][ T9179] xt_CT: No such helper "pptp" [ 136.804381][ T9176] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.827469][ T9176] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 136.907177][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.927955][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 136.937015][ T9195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'. [ 136.951679][ T9197] lo: entered promiscuous mode [ 136.956707][ T9197] lo: entered allmulticast mode [ 137.073901][ T9208] loop0: detected capacity change from 0 to 512 [ 137.097194][ T9208] EXT4-fs (loop0): too many log groups per flexible block group [ 137.104987][ T9208] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 137.125478][ T9208] EXT4-fs (loop0): mount failed [ 137.206355][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 137.215488][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 137.228955][ T9217] erspan0: entered promiscuous mode [ 137.244163][ T9217] erspan0: left promiscuous mode [ 137.244635][ T9233] 9pnet_fd: Insufficient options for proto=fd [ 137.312186][ T9238] FAULT_INJECTION: forcing a failure. [ 137.312186][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 137.324905][ T9238] CPU: 0 UID: 0 PID: 9238 Comm: syz.0.2078 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 137.324988][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.325001][ T9238] Call Trace: [ 137.325008][ T9238] [ 137.325015][ T9238] dump_stack_lvl+0xf2/0x150 [ 137.325119][ T9238] dump_stack+0x15/0x1a [ 137.325144][ T9238] should_fail_ex+0x24a/0x260 [ 137.325179][ T9238] should_failslab+0x8f/0xb0 [ 137.325264][ T9238] kmem_cache_alloc_node_noprof+0x59/0x320 [ 137.325347][ T9238] ? __alloc_skb+0x10b/0x310 [ 137.325378][ T9238] __alloc_skb+0x10b/0x310 [ 137.325405][ T9238] netlink_alloc_large_skb+0xad/0xe0 [ 137.325483][ T9238] netlink_sendmsg+0x3b4/0x6e0 [ 137.325556][ T9238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.325630][ T9238] __sock_sendmsg+0x140/0x180 [ 137.325710][ T9238] ____sys_sendmsg+0x326/0x4b0 [ 137.325742][ T9238] __sys_sendmsg+0x19d/0x230 [ 137.325846][ T9238] __x64_sys_sendmsg+0x46/0x50 [ 137.325921][ T9238] x64_sys_call+0x2734/0x2dc0 [ 137.325971][ T9238] do_syscall_64+0xc9/0x1c0 [ 137.326002][ T9238] ? clear_bhb_loop+0x55/0xb0 [ 137.326029][ T9238] ? clear_bhb_loop+0x55/0xb0 [ 137.326056][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.326179][ T9238] RIP: 0033:0x7f379747d169 [ 137.326194][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.326270][ T9238] RSP: 002b:00007f3795ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.326367][ T9238] RAX: ffffffffffffffda RBX: 00007f3797695fa0 RCX: 00007f379747d169 [ 137.326379][ T9238] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 137.326391][ T9238] RBP: 00007f3795ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.326403][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.326436][ T9238] R13: 0000000000000000 R14: 00007f3797695fa0 R15: 00007ffd0728fa68 [ 137.326454][ T9238] [ 137.647985][ T9257] 9pnet_fd: Insufficient options for proto=fd [ 137.682110][ T9262] FAULT_INJECTION: forcing a failure. [ 137.682110][ T9262] name failslab, interval 1, probability 0, space 0, times 0 [ 137.694833][ T9262] CPU: 0 UID: 0 PID: 9262 Comm: syz.2.2089 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 137.694861][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.694890][ T9262] Call Trace: [ 137.694897][ T9262] [ 137.694906][ T9262] dump_stack_lvl+0xf2/0x150 [ 137.694940][ T9262] dump_stack+0x15/0x1a [ 137.694964][ T9262] should_fail_ex+0x24a/0x260 [ 137.695001][ T9262] should_failslab+0x8f/0xb0 [ 137.695088][ T9262] kmem_cache_alloc_noprof+0x52/0x320 [ 137.695154][ T9262] ? audit_log_start+0x34c/0x6b0 [ 137.695192][ T9262] audit_log_start+0x34c/0x6b0 [ 137.695281][ T9262] audit_seccomp+0x4b/0x130 [ 137.695318][ T9262] __seccomp_filter+0x6fa/0x1180 [ 137.695370][ T9262] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.695431][ T9262] ? vfs_write+0x644/0x920 [ 137.695471][ T9262] __secure_computing+0x9f/0x1c0 [ 137.695500][ T9262] syscall_trace_enter+0xd1/0x1f0 [ 137.695531][ T9262] ? fpregs_assert_state_consistent+0x83/0xa0 [ 137.695557][ T9262] do_syscall_64+0xaa/0x1c0 [ 137.695628][ T9262] ? clear_bhb_loop+0x55/0xb0 [ 137.695656][ T9262] ? clear_bhb_loop+0x55/0xb0 [ 137.695683][ T9262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.695723][ T9262] RIP: 0033:0x7f7b9b1cd169 [ 137.695741][ T9262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.695770][ T9262] RSP: 002b:00007f7b99831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 137.695793][ T9262] RAX: ffffffffffffffda RBX: 00007f7b9b3e5fa0 RCX: 00007f7b9b1cd169 [ 137.695808][ T9262] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000400000b2c000 [ 137.695821][ T9262] RBP: 00007f7b99831090 R08: 0000000000000000 R09: 0000000000000000 [ 137.695839][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.695853][ T9262] R13: 0000000000000000 R14: 00007f7b9b3e5fa0 R15: 00007ffd63dce758 [ 137.695900][ T9262] [ 137.886345][ T9262] audit_log_lost: 713 callbacks suppressed [ 137.886360][ T9262] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 137.899894][ T9262] audit: out of memory in audit_log_start [ 137.908391][ T30] audit: type=1326 audit(1742162437.462:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 137.932420][ T30] audit: type=1326 audit(1742162437.462:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 137.956020][ T30] audit: type=1326 audit(1742162437.462:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 137.979613][ T30] audit: type=1326 audit(1742162437.462:13178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 138.003149][ T30] audit: type=1326 audit(1742162437.462:13179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 138.026708][ T30] audit: type=1326 audit(1742162437.462:13180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.1.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90bbe5d169 code=0x7ffc0000 [ 138.050424][ T30] audit: type=1326 audit(1742162437.462:13181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f7b9b1cd169 code=0x7ffc0000 [ 138.074193][ T30] audit: type=1326 audit(1742162437.462:13182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b9b1cbb7c code=0x7ffc0000 [ 138.218786][ T9283] 9pnet_fd: Insufficient options for proto=fd [ 138.334763][ T9303] FAULT_INJECTION: forcing a failure. [ 138.334763][ T9303] name failslab, interval 1, probability 0, space 0, times 0 [ 138.335866][ T9301] FAULT_INJECTION: forcing a failure. [ 138.335866][ T9301] name failslab, interval 1, probability 0, space 0, times 0 [ 138.347461][ T9303] CPU: 0 UID: 0 PID: 9303 Comm: syz.3.2105 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 138.347536][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.347570][ T9303] Call Trace: [ 138.347579][ T9303] [ 138.347588][ T9303] dump_stack_lvl+0xf2/0x150 [ 138.347624][ T9303] dump_stack+0x15/0x1a [ 138.347652][ T9303] should_fail_ex+0x24a/0x260 [ 138.347690][ T9303] should_failslab+0x8f/0xb0 [ 138.347769][ T9303] kmem_cache_alloc_noprof+0x52/0x320 [ 138.347810][ T9303] ? getname_flags+0x81/0x3b0 [ 138.347855][ T9303] getname_flags+0x81/0x3b0 [ 138.347899][ T9303] getname+0x17/0x20 [ 138.347918][ T9303] io_openat_prep+0x122/0x2c0 [ 138.348009][ T9303] io_submit_sqes+0x608/0x1070 [ 138.348062][ T9303] __se_sys_io_uring_enter+0x1c0/0x1b00 [ 138.348089][ T9303] ? 0xffffffff81000000 [ 138.348106][ T9303] ? __rcu_read_unlock+0x4e/0x70 [ 138.348256][ T9303] ? get_pid_task+0x8e/0xc0 [ 138.348291][ T9303] ? proc_fail_nth_write+0x12a/0x150 [ 138.348328][ T9303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 138.348368][ T9303] ? vfs_write+0x644/0x920 [ 138.348471][ T9303] ? __fget_files+0x17c/0x1c0 [ 138.348516][ T9303] ? fput+0x1c4/0x200 [ 138.348535][ T9303] ? ksys_write+0x176/0x1b0 [ 138.348577][ T9303] __x64_sys_io_uring_enter+0x78/0x90 [ 138.348604][ T9303] x64_sys_call+0xb5e/0x2dc0 [ 138.348639][ T9303] do_syscall_64+0xc9/0x1c0 [ 138.348679][ T9303] ? clear_bhb_loop+0x55/0xb0 [ 138.348713][ T9303] ? clear_bhb_loop+0x55/0xb0 [ 138.348820][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.348884][ T9303] RIP: 0033:0x7f778f4ad169 [ 138.348902][ T9303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.348926][ T9303] RSP: 002b:00007f778db17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.348955][ T9303] RAX: ffffffffffffffda RBX: 00007f778f6c5fa0 RCX: 00007f778f4ad169 [ 138.348971][ T9303] RDX: 000000000000addf RSI: 0000000000003516 RDI: 0000000000000003 [ 138.348988][ T9303] RBP: 00007f778db17090 R08: 0000000000000000 R09: 000000000001517f [ 138.349004][ T9303] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 138.349027][ T9303] R13: 0000000000000000 R14: 00007f778f6c5fa0 R15: 00007ffe9964f5a8 [ 138.349045][ T9303] [ 138.588557][ T9301] CPU: 1 UID: 0 PID: 9301 Comm: syz.2.2104 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 138.588588][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.588603][ T9301] Call Trace: [ 138.588690][ T9301] [ 138.588698][ T9301] dump_stack_lvl+0xf2/0x150 [ 138.588734][ T9301] dump_stack+0x15/0x1a [ 138.588761][ T9301] should_fail_ex+0x24a/0x260 [ 138.588827][ T9301] ? kobject_uevent_env+0x1a4/0x550 [ 138.588943][ T9301] should_failslab+0x8f/0xb0 [ 138.588980][ T9301] __kmalloc_cache_noprof+0x4e/0x320 [ 138.589004][ T9301] ? __pfx_dev_uevent_name+0x10/0x10 [ 138.589037][ T9301] kobject_uevent_env+0x1a4/0x550 [ 138.589126][ T9301] ? kobject_put+0x10a/0x180 [ 138.589208][ T9301] kobject_uevent+0x1c/0x30 [ 138.589240][ T9301] device_release_driver_internal+0x478/0x4f0 [ 138.589277][ T9301] device_release_driver+0x19/0x20 [ 138.589306][ T9301] usb_driver_release_interface+0xf2/0x100 [ 138.589360][ T9301] proc_ioctl+0x1ef/0x400 [ 138.589402][ T9301] usbdev_ioctl+0x1fb8/0x3f20 [ 138.589476][ T9301] ? do_vfs_ioctl+0x98b/0x1590 [ 138.589504][ T9301] ? selinux_file_ioctl+0x2f7/0x380 [ 138.589623][ T9301] ? __fget_files+0x17c/0x1c0 [ 138.589663][ T9301] ? __pfx_usbdev_ioctl+0x10/0x10 [ 138.589699][ T9301] __se_sys_ioctl+0xc9/0x140 [ 138.589737][ T9301] __x64_sys_ioctl+0x43/0x50 [ 138.589796][ T9301] x64_sys_call+0x1690/0x2dc0 [ 138.589830][ T9301] do_syscall_64+0xc9/0x1c0 [ 138.589912][ T9301] ? clear_bhb_loop+0x55/0xb0 [ 138.589947][ T9301] ? clear_bhb_loop+0x55/0xb0 [ 138.589978][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.590008][ T9301] RIP: 0033:0x7f7b9b1cd169 [ 138.590082][ T9301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.590103][ T9301] RSP: 002b:00007f7b99831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.590126][ T9301] RAX: ffffffffffffffda RBX: 00007f7b9b3e5fa0 RCX: 00007f7b9b1cd169 [ 138.590162][ T9301] RDX: 0000400000000200 RSI: 00000000c0105512 RDI: 0000000000000003 [ 138.590177][ T9301] RBP: 00007f7b99831090 R08: 0000000000000000 R09: 0000000000000000 [ 138.590191][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.590203][ T9301] R13: 0000000000000000 R14: 00007f7b9b3e5fa0 R15: 00007ffd63dce758 [ 138.590224][ T9301] [ 138.928791][ T9334] FAULT_INJECTION: forcing a failure. [ 138.928791][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 138.939838][ T9332] loop0: detected capacity change from 0 to 128 [ 138.941478][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.4.2119 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 138.941512][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.941530][ T9334] Call Trace: [ 138.941537][ T9334] [ 138.941547][ T9334] dump_stack_lvl+0xf2/0x150 [ 138.941583][ T9334] dump_stack+0x15/0x1a [ 138.941611][ T9334] should_fail_ex+0x24a/0x260 [ 138.941713][ T9334] should_failslab+0x8f/0xb0 [ 138.941751][ T9334] __kmalloc_noprof+0xab/0x3f0 [ 138.941874][ T9334] ? sock_kmalloc+0x83/0xc0 [ 138.941977][ T9334] sock_kmalloc+0x83/0xc0 [ 138.942011][ T9334] ____sys_sendmsg+0x127/0x4b0 [ 138.942048][ T9334] __sys_sendmsg+0x19d/0x230 [ 138.942138][ T9334] __x64_sys_sendmsg+0x46/0x50 [ 138.942172][ T9334] x64_sys_call+0x2734/0x2dc0 [ 138.942205][ T9334] do_syscall_64+0xc9/0x1c0 [ 138.942244][ T9334] ? clear_bhb_loop+0x55/0xb0 [ 138.942359][ T9334] ? clear_bhb_loop+0x55/0xb0 [ 138.942393][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.942427][ T9334] RIP: 0033:0x7fe7a08dd169 [ 138.942447][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.942476][ T9334] RSP: 002b:00007fe79ef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.942554][ T9334] RAX: ffffffffffffffda RBX: 00007fe7a0af5fa0 RCX: 00007fe7a08dd169 [ 138.942566][ T9334] RDX: 0000000000000000 RSI: 0000400000000800 RDI: 0000000000000007 [ 138.942581][ T9334] RBP: 00007fe79ef47090 R08: 0000000000000000 R09: 0000000000000000 [ 138.942596][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.942611][ T9334] R13: 0000000000000000 R14: 00007fe7a0af5fa0 R15: 00007ffc3284a4c8 [ 138.942713][ T9334] [ 139.005152][ T9340] loop2: detected capacity change from 0 to 1024 [ 139.024158][ T9342] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 139.177865][ T9348] x_tables: duplicate underflow at hook 1 [ 139.187417][ T9340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.200332][ T9340] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.215621][ T9340] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 139.383800][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.054624][ T9366] netlink: 'syz.4.2129': attribute type 7 has an invalid length. [ 140.066940][ T9369] loop2: detected capacity change from 0 to 512 [ 140.095601][ T9369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.124275][ T9369] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 140.135708][ T9369] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 140.147281][ T9369] EXT4-fs (loop2): 1 truncate cleaned up [ 140.153371][ T9369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.227277][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.256663][ T9372] capability: warning: `syz.1.2130' uses deprecated v2 capabilities in a way that may be insecure [ 140.505289][ T9385] loop2: detected capacity change from 0 to 1024 [ 140.529945][ T9387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.556072][ T9385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.584458][ T9395] 9pnet_fd: Insufficient options for proto=fd [ 140.585452][ T9385] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.611380][ T9385] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 140.630685][ T9399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9399 comm=syz.0.2140 [ 140.644105][ T9385] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 140.659988][ T9399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2140'. [ 140.670498][ T9385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.679923][ T9399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2140'. [ 140.708414][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.752591][ T9407] loop0: detected capacity change from 0 to 1024 [ 140.777578][ T9409] loop2: detected capacity change from 0 to 512 [ 140.837100][ T9409] EXT4-fs (loop2): too many log groups per flexible block group [ 140.844865][ T9409] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 140.884353][ T9409] EXT4-fs (loop2): mount failed [ 140.972903][ T9422] loop2: detected capacity change from 0 to 512 [ 141.043051][ T9422] EXT4-fs (loop2): too many log groups per flexible block group [ 141.050797][ T9422] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 141.133111][ T9422] EXT4-fs (loop2): mount failed [ 141.147344][ T9433] 9pnet_fd: Insufficient options for proto=fd [ 141.198181][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2153'. [ 141.337896][ T9446] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 141.384970][ T9450] loop2: detected capacity change from 0 to 1024 [ 141.398876][ T9450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.411818][ T9450] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.424677][ T9450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 141.442552][ T9450] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 141.459006][ T9450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.483580][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.510203][ T9456] loop2: detected capacity change from 0 to 1024 [ 141.526543][ T9456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.542104][ T9456] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.563189][ T9462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.573873][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.626807][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 141.653252][ T9472] block device autoloading is deprecated and will be removed. [ 141.700170][ T9477] loop2: detected capacity change from 0 to 512 [ 141.706963][ T9477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.721815][ T9477] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 141.730131][ T9477] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 141.734108][ T9482] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 141.739270][ T9477] EXT4-fs (loop2): 1 truncate cleaned up [ 141.752275][ T9477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.840736][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.061581][ T9499] loop0: detected capacity change from 0 to 1024 [ 142.078564][ T9499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.095829][ T9499] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.126882][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.179792][ T9503] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 142.305953][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'. [ 142.315073][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'. [ 142.349565][ T9514] loop0: detected capacity change from 0 to 512 [ 142.378562][ T9514] EXT4-fs (loop0): too many log groups per flexible block group [ 142.386289][ T9514] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 142.393284][ T9514] EXT4-fs (loop0): mount failed [ 142.445991][ T9518] loop0: detected capacity change from 0 to 1024 [ 142.453712][ T9518] EXT4-fs: dax option not supported [ 142.869146][ T9525] Cannot find del_set index 0 as target [ 142.885605][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2188'. [ 142.885820][ T9532] bond_slave_1: entered promiscuous mode [ 142.902109][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'. [ 142.916713][ T9531] bond0: (slave bond_slave_1): Releasing backup interface [ 142.926544][ T9531] bond_slave_1 (unregistering): left promiscuous mode [ 142.980771][ T30] kauditd_printk_skb: 459 callbacks suppressed [ 142.980830][ T30] audit: type=1400 audit(1742162442.532:13642): avc: denied { cpu } for pid=9541 comm="syz.2.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.007695][ T9542] FAULT_INJECTION: forcing a failure. [ 143.007695][ T9542] name failslab, interval 1, probability 0, space 0, times 0 [ 143.020495][ T9542] CPU: 1 UID: 0 PID: 9542 Comm: syz.2.2190 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 143.020525][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.020589][ T9542] Call Trace: [ 143.020596][ T9542] [ 143.020605][ T9542] dump_stack_lvl+0xf2/0x150 [ 143.020639][ T9542] dump_stack+0x15/0x1a [ 143.020686][ T9542] should_fail_ex+0x24a/0x260 [ 143.020712][ T9542] should_failslab+0x8f/0xb0 [ 143.020738][ T9542] kmem_cache_alloc_node_noprof+0x59/0x320 [ 143.020759][ T9542] ? __alloc_skb+0x10b/0x310 [ 143.020823][ T9542] __alloc_skb+0x10b/0x310 [ 143.020909][ T9542] netlink_alloc_large_skb+0xad/0xe0 [ 143.020936][ T9542] netlink_sendmsg+0x3b4/0x6e0 [ 143.021024][ T9542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.021054][ T9542] __sock_sendmsg+0x140/0x180 [ 143.021083][ T9542] ____sys_sendmsg+0x326/0x4b0 [ 143.021109][ T9542] __sys_sendmsg+0x19d/0x230 [ 143.021176][ T9542] __x64_sys_sendmsg+0x46/0x50 [ 143.021198][ T9542] x64_sys_call+0x2734/0x2dc0 [ 143.021221][ T9542] do_syscall_64+0xc9/0x1c0 [ 143.021247][ T9542] ? clear_bhb_loop+0x55/0xb0 [ 143.021275][ T9542] ? clear_bhb_loop+0x55/0xb0 [ 143.021341][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.021364][ T9542] RIP: 0033:0x7f7b9b1cd169 [ 143.021377][ T9542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.021392][ T9542] RSP: 002b:00007f7b99831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.021408][ T9542] RAX: ffffffffffffffda RBX: 00007f7b9b3e5fa0 RCX: 00007f7b9b1cd169 [ 143.021468][ T9542] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 000000000000000f [ 143.021478][ T9542] RBP: 00007f7b99831090 R08: 0000000000000000 R09: 0000000000000000 [ 143.021488][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.021498][ T9542] R13: 0000000000000000 R14: 00007f7b9b3e5fa0 R15: 00007ffd63dce758 [ 143.021514][ T9542] [ 143.267324][ T9547] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 143.344509][ T9558] dccp_xmit_packet: Payload too large (65475) for featneg. [ 143.371008][ T30] audit: type=1326 audit(1742162442.922:13643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.395272][ T30] audit: type=1326 audit(1742162442.922:13644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.419014][ T30] audit: type=1326 audit(1742162442.922:13645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.442541][ T30] audit: type=1326 audit(1742162442.922:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.466131][ T30] audit: type=1326 audit(1742162442.922:13647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.489637][ T30] audit: type=1326 audit(1742162442.922:13648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.500407][ T9568] FAULT_INJECTION: forcing a failure. [ 143.500407][ T9568] name failslab, interval 1, probability 0, space 0, times 0 [ 143.513223][ T30] audit: type=1326 audit(1742162442.922:13649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.525897][ T9568] CPU: 1 UID: 0 PID: 9568 Comm: syz.0.2201 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 143.526008][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.526032][ T9568] Call Trace: [ 143.526040][ T9568] [ 143.526049][ T9568] dump_stack_lvl+0xf2/0x150 [ 143.526089][ T9568] dump_stack+0x15/0x1a [ 143.526110][ T9568] should_fail_ex+0x24a/0x260 [ 143.526207][ T9568] should_failslab+0x8f/0xb0 [ 143.526248][ T9568] kmem_cache_alloc_node_noprof+0x59/0x320 [ 143.526343][ T9568] ? __alloc_skb+0x10b/0x310 [ 143.526373][ T9568] __alloc_skb+0x10b/0x310 [ 143.526401][ T9568] netlink_alloc_large_skb+0xad/0xe0 [ 143.526441][ T9568] netlink_sendmsg+0x3b4/0x6e0 [ 143.526529][ T9568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.526633][ T9568] __sock_sendmsg+0x140/0x180 [ 143.526743][ T9568] ____sys_sendmsg+0x326/0x4b0 [ 143.526789][ T9568] __sys_sendmmsg+0x227/0x4b0 [ 143.526855][ T9568] __x64_sys_sendmmsg+0x57/0x70 [ 143.526969][ T9568] x64_sys_call+0x29aa/0x2dc0 [ 143.527003][ T9568] do_syscall_64+0xc9/0x1c0 [ 143.527051][ T9568] ? clear_bhb_loop+0x55/0xb0 [ 143.527086][ T9568] ? clear_bhb_loop+0x55/0xb0 [ 143.527158][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.527193][ T9568] RIP: 0033:0x7f379747d169 [ 143.527212][ T9568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.527235][ T9568] RSP: 002b:00007f3795ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.527318][ T9568] RAX: ffffffffffffffda RBX: 00007f3797695fa0 RCX: 00007f379747d169 [ 143.527335][ T9568] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000005 [ 143.527384][ T9568] RBP: 00007f3795ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.527400][ T9568] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 143.527415][ T9568] R13: 0000000000000000 R14: 00007f3797695fa0 R15: 00007ffd0728fa68 [ 143.527440][ T9568] [ 143.744226][ T30] audit: type=1326 audit(1742162442.922:13650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.767759][ T30] audit: type=1326 audit(1742162442.922:13651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f379747d169 code=0x7ffc0000 [ 143.918809][ T9573] tipc: Started in network mode [ 143.923742][ T9573] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 143.930871][ T9573] tipc: Enabled bearer , priority 10 [ 144.072925][ T9577] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 144.109575][ T9580] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2205'. [ 144.226070][ T9591] FAULT_INJECTION: forcing a failure. [ 144.226070][ T9591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.239326][ T9591] CPU: 1 UID: 0 PID: 9591 Comm: syz.2.2209 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 144.239351][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.239364][ T9591] Call Trace: [ 144.239371][ T9591] [ 144.239408][ T9591] dump_stack_lvl+0xf2/0x150 [ 144.239441][ T9591] dump_stack+0x15/0x1a [ 144.239539][ T9591] should_fail_ex+0x24a/0x260 [ 144.239578][ T9591] should_fail+0xb/0x10 [ 144.239606][ T9591] should_fail_usercopy+0x1a/0x20 [ 144.239685][ T9591] _copy_from_user+0x1c/0xa0 [ 144.239709][ T9591] copy_msghdr_from_user+0x54/0x2a0 [ 144.239746][ T9591] ? __fget_files+0x17c/0x1c0 [ 144.239789][ T9591] __sys_sendmsg+0x13e/0x230 [ 144.239837][ T9591] __x64_sys_sendmsg+0x46/0x50 [ 144.239887][ T9591] x64_sys_call+0x2734/0x2dc0 [ 144.239916][ T9591] do_syscall_64+0xc9/0x1c0 [ 144.239954][ T9591] ? clear_bhb_loop+0x55/0xb0 [ 144.240024][ T9591] ? clear_bhb_loop+0x55/0xb0 [ 144.240057][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.240089][ T9591] RIP: 0033:0x7f7b9b1cd169 [ 144.240108][ T9591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.240233][ T9591] RSP: 002b:00007f7b99831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.240255][ T9591] RAX: ffffffffffffffda RBX: 00007f7b9b3e5fa0 RCX: 00007f7b9b1cd169 [ 144.240267][ T9591] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 144.240279][ T9591] RBP: 00007f7b99831090 R08: 0000000000000000 R09: 0000000000000000 [ 144.240290][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.240393][ T9591] R13: 0000000000000000 R14: 00007f7b9b3e5fa0 R15: 00007ffd63dce758 [ 144.240416][ T9591] [ 144.243314][ T9592] dccp_close: ABORT with 132 bytes unread [ 144.467450][ T9604] FAULT_INJECTION: forcing a failure. [ 144.467450][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 144.480241][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.4.2214 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 144.480329][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.480341][ T9604] Call Trace: [ 144.480347][ T9604] [ 144.480354][ T9604] dump_stack_lvl+0xf2/0x150 [ 144.480382][ T9604] dump_stack+0x15/0x1a [ 144.480523][ T9604] should_fail_ex+0x24a/0x260 [ 144.480561][ T9604] should_failslab+0x8f/0xb0 [ 144.480594][ T9604] kmem_cache_alloc_node_noprof+0x59/0x320 [ 144.480617][ T9604] ? __alloc_skb+0x10b/0x310 [ 144.480640][ T9604] __alloc_skb+0x10b/0x310 [ 144.480707][ T9604] netlink_alloc_large_skb+0xad/0xe0 [ 144.480743][ T9604] netlink_sendmsg+0x3b4/0x6e0 [ 144.480781][ T9604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.480814][ T9604] __sock_sendmsg+0x140/0x180 [ 144.480849][ T9604] ____sys_sendmsg+0x326/0x4b0 [ 144.480921][ T9604] __sys_sendmsg+0x19d/0x230 [ 144.480960][ T9604] __x64_sys_sendmsg+0x46/0x50 [ 144.480985][ T9604] x64_sys_call+0x2734/0x2dc0 [ 144.481014][ T9604] do_syscall_64+0xc9/0x1c0 [ 144.481118][ T9604] ? clear_bhb_loop+0x55/0xb0 [ 144.481151][ T9604] ? clear_bhb_loop+0x55/0xb0 [ 144.481196][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.481229][ T9604] RIP: 0033:0x7fe7a08dd169 [ 144.481250][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.481270][ T9604] RSP: 002b:00007fe79ef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.481290][ T9604] RAX: ffffffffffffffda RBX: 00007fe7a0af5fa0 RCX: 00007fe7a08dd169 [ 144.481312][ T9604] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000003 [ 144.481332][ T9604] RBP: 00007fe79ef47090 R08: 0000000000000000 R09: 0000000000000000 [ 144.481346][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.481360][ T9604] R13: 0000000000000000 R14: 00007fe7a0af5fa0 R15: 00007ffc3284a4c8 [ 144.481420][ T9604] [ 144.702295][ T9603] Cannot find del_set index 0 as target [ 144.756115][ T9617] loop4: detected capacity change from 0 to 512 [ 144.766502][ T9618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2219'. [ 144.780567][ T9617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.793183][ T9617] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.821636][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 144.874630][ T9628] FAULT_INJECTION: forcing a failure. [ 144.874630][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.887790][ T9628] CPU: 1 UID: 0 PID: 9628 Comm: syz.4.2221 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 144.887820][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.887834][ T9628] Call Trace: [ 144.887841][ T9628] [ 144.887847][ T9628] dump_stack_lvl+0xf2/0x150 [ 144.887879][ T9628] dump_stack+0x15/0x1a [ 144.887927][ T9628] should_fail_ex+0x24a/0x260 [ 144.887964][ T9628] should_fail+0xb/0x10 [ 144.887994][ T9628] should_fail_usercopy+0x1a/0x20 [ 144.888160][ T9628] strncpy_from_user+0x25/0x210 [ 144.888195][ T9628] ? __kmalloc_cache_noprof+0x186/0x320 [ 144.888226][ T9628] __se_sys_memfd_create+0x218/0x5a0 [ 144.888259][ T9628] __x64_sys_memfd_create+0x31/0x40 [ 144.888289][ T9628] x64_sys_call+0x2d4c/0x2dc0 [ 144.888322][ T9628] do_syscall_64+0xc9/0x1c0 [ 144.888376][ T9628] ? clear_bhb_loop+0x55/0xb0 [ 144.888407][ T9628] ? clear_bhb_loop+0x55/0xb0 [ 144.888433][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.888459][ T9628] RIP: 0033:0x7fe7a08dd169 [ 144.888499][ T9628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.888517][ T9628] RSP: 002b:00007fe79ef46e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 144.888539][ T9628] RAX: ffffffffffffffda RBX: 00000000000004d1 RCX: 00007fe7a08dd169 [ 144.888555][ T9628] RDX: 00007fe79ef46ef0 RSI: 0000000000000000 RDI: 00007fe7a095ec3c [ 144.888570][ T9628] RBP: 0000400000000b80 R08: 00007fe79ef46bb7 R09: 00007fe79ef46e40 [ 144.888584][ T9628] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000640 [ 144.888599][ T9628] R13: 00007fe79ef46ef0 R14: 00007fe79ef46eb0 R15: 00004000000001c0 [ 144.888620][ T9628] [ 144.891348][ T9628] loop4: detected capacity change from 0 to 512 [ 145.068551][ T3378] tipc: Node number set to 10136234 [ 145.086120][ T3002] ================================================================== [ 145.094250][ T3002] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 145.101499][ T3002] [ 145.103839][ T3002] write to 0xffff888104c67ab0 of 8 bytes by task 3659 on cpu 1: [ 145.111489][ T3002] dentry_unlink_inode+0x65/0x260 [ 145.116550][ T3002] d_delete+0x164/0x180 [ 145.120733][ T3002] d_delete_notify+0x34/0x100 [ 145.125439][ T3002] vfs_unlink+0x320/0x430 [ 145.129798][ T3002] do_unlinkat+0x237/0x4d0 [ 145.134243][ T3002] __x64_sys_unlink+0x2e/0x40 [ 145.138953][ T3002] x64_sys_call+0x2329/0x2dc0 [ 145.143748][ T3002] do_syscall_64+0xc9/0x1c0 [ 145.148290][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.154216][ T3002] [ 145.156555][ T3002] read to 0xffff888104c67ab0 of 8 bytes by task 3002 on cpu 0: [ 145.164197][ T3002] step_into+0x11d/0x820 [ 145.168480][ T3002] walk_component+0x169/0x230 [ 145.173194][ T3002] path_lookupat+0x10a/0x2b0 [ 145.177819][ T3002] filename_lookup+0x150/0x340 [ 145.182617][ T3002] do_readlinkat+0x89/0x210 [ 145.187152][ T3002] __x64_sys_readlink+0x47/0x60 [ 145.192037][ T3002] x64_sys_call+0x28ba/0x2dc0 [ 145.196745][ T3002] do_syscall_64+0xc9/0x1c0 [ 145.201288][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.207217][ T3002] [ 145.209585][ T3002] value changed: 0xffff888118607d88 -> 0x0000000000000000 [ 145.216714][ T3002] [ 145.219054][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 145.225225][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 145.235491][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.245572][ T3002] ================================================================== [ 145.263753][ T9628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.276555][ T9628] ext4 filesystem being mounted at /426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.343897][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.